300M MIMO Triple Smart Router

Transcription

1 Model No. ib-wrt300n User Manual

2 FCC STATEMENT This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates uses and can radiate radio frequency energy and, if not in-stalled and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/ TV technician for help. This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions: This device may not cause harmful interference. This device must accept any interference received, including interference that may cause undesired operation. Any changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate the equipment.

3 CE Mark Warning This is a class B product. In a domestic environment, this product may cause radio interference, in which case the user may be required to take adequate measures.

4 CONTENTS Package Contents... 1 Chapter 1. Product Overview Overview of the router Main Features Conventions... 3 Chapter 2. Hardware Installation The Front Panel The Back Panel Installation Environment Connecting the Router TCP/IP Configuration Quick Installation Guide... 8 Chapter 3. Configuring the Router Login Status Quick Setup Operation Mode Network Settings WAN G Settings VLAN LAN IPv6 LAN Settings MAC Clone ALG Settings ADSL Settings IPTV DHCP Server DHCP Settings Clients List Address Reservation Conditional Pool... 44

5 3.8 Wireless Basic Settings WPS Settings Wireless Security Wireless Schedule Wireless MAC Filtering Wireless Advanced Wireless Status Guest Wi-Fi Basic Settings Guest Wi-Fi Status USB Storage USB Mass Storage User Accounts Storage Sharing FTP Server Media Server Routing Default Gateway Static Route IPv6 Static Route RIP Settings Forwarding Virtual Servers Port Triggering DMZ UPnP Parental Control Access Restriction Rules Rule Host (LAN) Target (WAN) Schedule DoS IPv6 Firewall IPv6 Rule... 81

6 IPv6 Host IPv6 Target IPv6 Schedule IPv6 Tunnel Bandwidth Control IP&MAC Binding Binding Settings ARP List Dynamic DNS Diagnostic System Tools System Log Time Settings Remote Management CWMP Settings SNMP Settings Backup & Restore Factory Defaults Firmware Upgrade Restart Statistics Logout Appendix A: Specifications

7 Package Contents The following contents should be found in your package: 2 x 5 dbi Antenna (Fixed) Power Adapter CD &Quick Installation Guide RJ45 Patch Cord ADSL Splitter RJ11 Patch cord Note: Make sure that the package contains the above items. If any of the listed items are damaged or missing, please contact your distributor. 1

8 Chapter 1. Product Overview Thank you for choosing. 1.1 Overview of the router iball Baton 300M MIMO Triple smart Router complies with IEEE b/g/n wireless standards. MIMO Technology - Wireless Transmission speed up to 300Mbps. Triple WAN Router ADSL Internet (xdsl) Internet: 1-10/100M (RJ11) WAN ports Broadband (Cable / DSL) Internet: 1-10/100M (RJ45) WAN port 3G Internet - USB slotfor 2G/3G Compatible Data card (HSPA+, WCDMA, CDMA, EV-DO) Failover connection Auto WAN Failover with between3g Backup USB Storage with Multifunction Storage Sharing Media Server (DLNA) FTP Server Wi-Fi On/Off button Turn off wireless security to save power consumption as not in use. Easy Setup Wizard Utility helps users to configure the router easily. 2

9 1.2 Main Features Complies with IEEE802.11b/g/n standards MIMO Technology (2T2R) - Enhanced wireless transmission speed upto 300Mbps Triple WAN Support - Shares Internet through ADSL / Broadband / 3G Network ADSL Internet (xdsl) support through RJ11 port Complies with Broadband Internet (Cable / DSL) support through RJ45 port USB 2.0 slot for 2G/3G compatible data card (GSM/ CDMA/ WCDMA/ HSPA+) USB 2.0 Data sharing and Media Server Support Auto Failover between 3G & ADSL or 3G / Broadband Internet Multi-SSID Security Secure Guest Wi-Fi Network. Wireless Security such as WEP, WPA-PSK & WPA2-PSK Supports IPv4 / IPv6 Dual stack With firewall security features such as IP, MAC, Domain & URL Filtering With NAT, Virtual Server and DMZ functions Web based UI & Remote Management Control Antenna Type: 5dBi x 2 Omni-Directional 1.3 Conventions The Router or device mentioned in this User Guide stands for ib-wrt300n without any explanations. Parameters provided in the pictures are just references for setting up the product, which may differ from the actual situation 3

10 Chapter 2. Hardware Installation 2.1 The Front Panel Figure 2-1 The Router s LEDs are located on the front panel (View from left to right). They indicate the device s working status. For details, please refer to LED Explanation. LED Indicators: LED Status Description Power OFF Power not connected to router ON Power connected to router ADSL Green in flash Initializing ADSL Green ADSL line is ok Internet Red ADSL line UP WLAN Blue on Wireless on Blue flash Blue off Data transfer Wireless off LAN Green in fast flash Data packet transferred through the port USB Green USB on Green in flash Data access WPS Blue in flash WPS is activated 4

11 The following part is located on the front panel. WPS/WLAN Press this button to enable/disable the WLAN function. Press and hold this button for more than 5 seconds enables the WPS function. If your client devices, such as wireless adapters, support Wi-Fi Protected Setup, then you can press this button to quickly establish a connection between the router and client devices and automatically configure wireless security for your wireless network. 2.2 The Back Panel The Router's ports, where the cables are connected, and RESET button are located on the back panel. Figure 2-2 POWER: The Power plug is where you will connect the power adapter. ON/OFF: The switch for the power. RESET: There are two ways to reset the Router's factory defaults. Hard Reset: With the Router powered on, use a pin to press and hold the Reset button for at least 5 seconds. Soft Reset: Restore the default setting from Maintenance- Restart of the Router's Web-based Utility. USB: The USB port connects to a USB storage device / 3G USB modem 4, 3, 2, 1 (LAN): Through the port, you can connect the Router to your PC or the other Ethernet network devices. LINE: Through the port, you can connect the router with the telephone. Or you can connect them by an external separate splitter. Antennas: Used for wireless operation and data transmit. 5

12 2.3 Installation Environment The Product should not be located where it will be exposed to moisture or excessive heat. Place the router in a location where it can be connected to the various devices as well as to a power source. Make sure the cables and power cord are safely placed out of the way so they do not create a tripping hazard. The Router can be placed on a shelf or desktop. Keep away from the strong electromagnetic radiation and the device of electromagnetic sensitive. 2.4 Connecting the Router Before installing the device, please make sure your Broadband / ADSL / 3G service provided by your ISP is available. (3G service verify the SIM is activated / data service is activated). If there is any problem, please contact your ISP. ADSL Internet - (RJ11) WAN Port Broadband Internet - (RJ45) LAN Port~4 / WAN Port USB Internet - USB Slot Figure 2-3 Quick Installation Guide 6

13 2.5 TCP/IP Configuration The default IP address of the is And the default Subnet Mask is These values can be changed as you desire. In this guide, we use all the default values for description. Connect your PC to the LAN port of the Router, you can configure your PC to an obtain IP address in the following way: 1) Set up the TCP/IP Protocol (Version 4) in "Obtain an IP address automatically" mode on your PC. 2) Then the router will assign IP address for the PC. Now, you can run the Ping command in the command prompt to verify the network connection. Please click the Start menu on your desktop, select run tab, type cmd or command in the field and press Enter. Type ping on the next screen, and then press Enter. If the result displayed is similar to the screen below, the connection between your PC and the router has been established. Figure 2-4 If the result displayed is similar to the screen shown below, it means that your PC has not connected to the router. 7

14 Figure 2-5 You can check it follow the steps below: 1) Is the connection between your PC and the router correct? The LEDs of LAN port which you link to the device and the LEDs on your PC's adapter should be lit. 2) Is the TCP/IP configuration for your PC correct? If the router's IP address is , your PC's IP address must be within the range of ~ Quick Installation Guide There are two methods for you to set up the ib-wrt300n Router quickly and easily. Method I> Easy Setup Wizard Method - II>Web Based configuration through browser Method - I Configuring the Router via Easy Setup Wizard (Resource CD) Insert the Resource CD into your CD-ROM device. Figure 2-6 8

15 The Easy Setup Wizard will automatically pop up on the computer s screen. Click on Start to start the Easy Setup Wizard. Figure 2-7 Method II > Web Based configuration through browser Login to the Router Type in the IP Address ( Figure 2-8 Type the default Username admin and password admin and click Login button. Figure 2-9 Click Quick Wizard for basic settings in a simple way. Figure

16 Select the Internet connection type ADSL / Broadband / 3G Press Next to continue Figure 2-11 For Advanced Settings, select the Network Settings Menu to setup the configuration by your own selection. Configure Router through GUI Menu ADSL Connection Select ADSL Connection and Click on Next Figure 2-12 Select ISP (Internet Service Provider, VPI, VCI and connection type). Click on Next Figure 2-13 Enter the details as provided from your ISP for Internet configuring. Figure

17 3G Backup Enable 3G Internet for backup connection. (if not required, you can go next) Figure 2-15 Broadband Connection Select Broadband Connection Type and Click on Next Figure PPPoE Mode Enter the details as provided from your ISP for configuring Internet. Figure Dynamic IP Router s WAN port will be assigned Automatic IP address as per ISP settings to configure internet - Static IP Enter the details as provided from your ISP for configuring Internet. Figure

18 3G Backup Enable 3G Internet connection for backup connection. (if not required, you can go next) 3G Connection Figure G Connection type and Click on Next Figure 2-20 Select Mobile ISP as SIM service inserted in USB modem. Default ISP settings is AIRTEL Do not modify other settings unless required Figure 2-21 Wireless Settings Enter the SSID for wireless Network and its security password. Figure

19 Confirm the settings and click on Save. Figure 2-23 Click Finish to complete it. Figure 2-24 After a moment, a login window will appear, similar to the Figure 2-9. Enter admin for the User Name and Password, both in lower case letters. Then click the Login button or press the Enter key. Note: 1) Do not mix up the user name and password with your ADSL account user name and password which are needed for PPP connections. 2) If the above screen does not pop up, it means that your Web-browser has been set to a proxy. Go to Tools menu Internet Options Connections LAN Settings, in the screen that appears, cancel the Using Proxy checkbox, and click OK to finish it. 1. After your successful login, you will see the Login screen as shown in Figure Click Quick Setup menu to access Quick Setup Wizard. 13

20 Figure The router supports three modes: ADSL Connection, Broadband Connection (Cable/DSL) and 3G Connection. Choose your desired mode and then click Next. 14

21 Figure 2-26 ADSL Connection: In this mode, the device enables multi-users to share Internet via ADSL using its ADSL port and share it wirelessly at 300Mbps wireless n speeds. Broadband Connection (Cable/DSL): In this mode, the device enables multi-users to share Internet via Ethernet WAN (EWAN) using its interchangeable LAN/WAN port and share it wirelessly at 300Mbps wireless n speeds. 3G Connection: In this mode, the device allows multi-users to share a 3G mobile broadband connection via wired or wireless connection. 1) ADSL Connection Select your Country and ISP from the drop-down list, then click Next. (If your country or ISP is not listed, please select Other. Enter VPI/VCI values and select Connection type provided by your ISP, then click Next.) Note: Figure 2-27 Select Other for your country or ISP, you can manually enter the VPI/VCI values and select Connection type. Here we use PPPoE as an example. Enter the Username, Password and Confirm 15

22 password given by your ISP, and then click Next. Figure ) Broadband Connection (Cable/DSL) Please select connection type. Figure 2-29 Here we use PPPoE as an example. Enter the Username, Password and Confirm password given by your ISP, and then click Next. Figure G backup function is disabled by default. Click Next to skip to the next step. 16

23 Note: Figure G can be set as a backup connection method if your current connection is unavailable. You can enable 3G backup function if needed and plug the 3G modem into the USB port of your router. 3) 3G Conection To use the 3G function, you should first insert your 3G USB modem on the USB port of the router. Then select your location and ISP. You can tick Set the Dial Number and APN manually to manually set them according to the information provided by your 3G ISP. Click Next. 3. On the Wireless screen, we use the default SSID, select a Mode. Set a Password or select Disable Security (Disable Security is not recommended.), and then click Next to continue. 17

24 Figure On this page, please confirm all parameters. Click Back to modify or click the Save button to save your configuration. Figure

25 5. You will see the Complete screen below, click Finish to complete these settings. Figure

26 Chapter 3. Configuring the Router This chapter will show each Web page's key function and the configuration way. 3.1 Login After your successful login, you will see the twenty main menus on the left of the Web-based utility. On the right, there are the corresponding explanations and instructions. The detailed explanations for each Web page s key function are listed below. 3.2 Status Choose Status, you can see the corresponding information about Device Information, DSL, WAN, LAN and WLAN. 20

27 Figure Quick Setup Please refer to Section 2.6 Quick Installation Guide. 3.4 Operation Mode Choose Operation Mode, and you will see the screen as shown in Figure 3-2. The router supports three operation mode types: ADSL Connection, 3G Connection and Broadband Connection (Cable / DSL). Select your desired mode and then click Next. 21

28 Figure 3-2 ADSL Connection: In this mode, the device enables multi-users to share Internet via ADSL using its ADSL port and share it wirelessly at 300Mbps wireless n speeds. 3G Connection: In this mode, the device allows multi-users to share a 3G mobile broadband connection via wired or wireless connection. Broadband Connection (Cable / DSL): In this mode, the device enables multi-users to share Internet via Ethernet WAN (EWAN) using its interchangeable LAN/WAN port and share it wirelessly at 300Mbps wireless n speeds. After you click the Save button, the Note Dialog will appear. Click OK and then the router will reboot. Please wait. 3.5 Network Settings Note Dialog Choose Network Settings, there are many submenus under the main menu. Click any one of them, and you will be able to configure the corresponding function. 22

29 3.5.1 WAN Choose Network Settings WAN, and you will see the WAN Port Information Table in the screen similar to Figure 3-3, which describes the WAN port settings and the relevant manipulation to each interface. There are six different configurations for the connection types, which are Static IP, Dynamic IP, PPPoE, PPPoA, IPoA and Bridge. You can select the corresponding types according to your needs. Figure 3-3 Click Add to add a new entry, you can configure the parameters for ATM and WAN Service in the next screen (shown in Figure 3-4) Static IP Figure 3-4 Select this option if your ISP provides static IP information to you. You should set static IP address, IP subnet mask, and gateway address in the screen below. 23

30 Figure 3-5 ATM Configuration: VPI (0~255): Identifies the virtual path between endpoints in an ATM network. The valid range is from 0 to 255. Please input the value provided by your ISP. VCI (1~65535): Identifies the virtual channel endpoints in an ATM network. The valid range is from 1 to (1 to 31 is reserved for well-known protocols). Please input the value provided by your ISP. Click Advance, advanced selections of ATM Configuration can be shown. Encapsulation Mode: Select the encapsulation mode for the Static IP Address. Here you can leave it default. ATM Qos Type: Select ATM Qos Type provided by ISP, and the type is UBR by default. WAN Service Setup: Enable IPv4: Check the box to enable IPv4. IP Address: Enter the IP address in dotted-decimal notation provided by your ISP. Subnet Mask: Enter the subnet Mask in dotted-decimal notation provided by your ISP, usually is Gateway: Enter the gateway IP address in dotted-decimal notation provided by your ISP. DNS Server/ Secondary DNS Server: Here you can set DNS Server (at least one) manually. The Route will use this DNS Server for priority. Enable IPv6: Check the box to enable IPv6. IPv6 Address: Enter the IPv6 address provided by your ISP. Prefix Length: Enter the prefix length of the IPv6 address. The default value is 64. IPv6 Gateway: Enter the gateway IPv6 address provided by your ISP. 24

31 IPv6 DNS Server / Secondary IPv6 DNS Server: Here you can set IPv6 DNS Server (at least one) manually. The Route will use this IPv6 DNS Server for priority. Default Gateway: select a WAN Interface from the drop-down list as the IPv4 default gateway. IPv6 Default Gateway: select a WAN Interface from the drop-down list as the IPv6 default gateway. Click Advance, advanced selections of WAN Service Setup can be shown. MTU (bytes): Maximum Transmission Unit Size. Check this box then you can change the MTU size. The default MTU value is 1500 Bytes. It is not recommended that you change the default value unless required by your ISP. Enable NAT: This technology translates the IP addresses of a local area network to a different IP address for the Internet. If this router is hosting your network s connection to the Internet, please select the check box. If another Router exists in your network, you don t need to select the option. Enable Fullcone NAT: It is a type of NAT, if not enabled, the default NAT will act. Enable SPI Firewall: A SPI firewall enhances network s security. Select the option to use a firewall, or else without a firewall. Enable IGMP Proxy: IGMP (Internet Group Management Protocol) is used to manage multicasting on TCP/IP networks. Some ISPs use IGMP to perform remote configuration for client devices, such as the router. The default value is enabled, and if you are not sure, please contact your ISP or just leave it. Click the Save button to save the settings Dynamic IP Select this option, the router will be able to obtain IP network information dynamically from a DHCP server provided by your ISP. 25

32 Figure 3-6 Click Advance, advanced selections for WAN Service Setup can be shown. MTU (bytes): Maximum Transmission Unit Size. Check this box then you can change the MTU size. The default MTU value is 1500 Bytes. It is not recommended that you change the default value unless required by your ISP. Enable NAT: This technology translates the IP addresses of a local area network to a different IP address for the Internet. If this router is hosting your network s connection to the Internet, please select the check box. If another Router exists in your network, you don t need to select the option. Enable Fullcone NAT: It is a type of NAT, if not enabled, the default NAT will act. Enable SPI Firewall: A SPI firewall enhances network s security. Select the option to use a firewall, or else without a firewall. Enable IGMP Proxy: IGMP (Internet Group Management Protocol) is used to manage multicasting on TCP/IP networks. Some ISPs use IGMP to perform remote configuration for client devices, such as the router. The default value is enabled, and if you are not sure, please contact your ISP or just leave it. 26

33 Get IP Unicast: This is disabled by default. The minority of DHCP Server of ISP will not support to enable this. When the Route is connected right but IP cannot get, you can select this box. Primary DNS Server/ Secondary DNS Server: Choose Set DNS Server manually, you can set DNS Server (at least one) manually here. The Route will use this DNS Server for priority. Get IPv6 Address with Unicast: This is disabled by default. The minority of DHCPv6 Server of ISP will not support to enable this. When the router is connected right but IPv6 address cannot get, you can select this box. Set IPv6 DNS Server manually: Choose Set IPv6 DNS Server manually, you can set IPv6 DNS Server manually here. The router will use this IPv6 DNS Server for priority. Click the Save button to save the settings PPPoE If your ISP provides a PPPoE connection and you need to use an ATM Interface, choose PPPoE in the drop-down list, and then the screen will be displayed as below. Figure

34 PPP Username/Password/Confirm password: Enter the User Name, Password and Confirm Password provided by your ISP. These fields are case-sensitive. Connection Mode: For PPPoE connection, you can select Always on, Connect on demand or Connect manually. Connect on demand is dependent on the traffic. If there is no traffic (or Idle) for a pre-specified period of time), the connection will tear down automatically. And once there is traffic send or receive, the connection will be automatically on. Authentication Type: Select the Authentication Type from the drop-down list, the default method is AUTO_AUTH, and you can leave it as a default setting. Enable IPv4: Check this box to enable IPv4. Enable IPv6: Check this box to enable IPv6. Default Gateway: Select a WAN connection from the drop-down list as the IPv4 default gateway. IPv6 Default Gateway: Select a WAN connection from the drop-down list as the IPv6 default gateway. Click Advance, advanced selections for WAN Service Setup can be shown. Service Name/Server Name: Enter the Service Name and Server Name if it was provided by your ISP. You can leave them blank, if the ISP doesn t provide them. MTU (bytes): Maximum Transmission Unit Size. Check this box then you can change the MTU size. The default MTU value is 1500 Bytes. It is not recommended that you change the default value unless required by your ISP. Enable Fullcone NAT: It is a type of NAT, if not enabled, the default NAT will act. Enable SPI Firewall: A SPI firewall enhances network s security. Select the option to use a firewall, or else without a firewall. Enable IGMP Proxy: IGMP (Internet Group Management Protocol) is used to manage multicasting on TCP/IP networks. Some ISPs use IGMP to perform remote configuration for client devices, such as the router. The default value is disabled, and if you are not sure, please contact your ISP or just leave it. Use IP address specified by ISP: Choose Use IP address specified by ISP, you can enter the IP address provided by your ISP. Set DNS Server manually: Choose Set DNS Server manually, you can set DNS Server manually here. The router will use this DNS Server for priority. Use IPv6 address specified by ISP: Choose Use IPv6 address specified by ISP, you can enter the IPv6 address provided by your ISP. Set IPv6 DNS Server manually: Choose Set IPv6 DNS Server manually, you can set IPv6 DNS Server manually here. The router will use this IPv6 DNS Server for priority PPPoA If your ISP provides a PPPoA connection and you need to use an ATM Interface, choose PPPoA in the drop-down list, and then the screen will be displayed as below. The configuration is similar to PPPoE. Please refer to the section PPPoE to configure this part. 28

35 Figure IPoA If your ISP provides an IPoA connection, select IPoA option for the WAN service type on the screen. Figure

36 IP Address/Subnet Mask: Enter the IP Address and Subnet Mask provided by ISP. If you forget, you can ask your ISP. DNS Server/Secondary DNS Server: Type in your preferred DNS server. Default Gateway: select a WAN Interface from the drop-down list as the default gateway Bridge If you select this type of connection, the modem can be configured to act as a bridging device between your LAN and your ISP. Bridges are devices that enable two or more networks to communicate as if they are two segments of the same physical LAN. Note: Figure 3-10 After you finish the Internet configuration, please click Save to make the settings take effect G Settings If your router s operation mode is 3G Router Mode, choose menu Network 3G Settings, you can configure parameters for 3G function on the screen below. To use the 3G function, you should first insert your USB modem on the USB port of the router. There is already much 3G USB modem information embedded in the router. Select the correct Location and Mobile ISP manually, the USB modem parameters will be set automatically if the card is supported by the router. If your USB modem inserted is supported by the router, then Identify successfully will display in the USB 3G Modem field as shown in Figure Some 3G USB modem may not be supported by the router. For more information, please refer to Compatibility List on our website. 30

37 Figure 3-11 Location: Please select the location where you're enjoying the 3G card. Mobile ISP: Please select the ISP (Internet Service Provider) you apply to for 3G service. The router will show the default Dial Number and APN of that ISP. Always on: Connect automatically after the router is disconnected. This option is enabled by default. Connect on demand: Connect on demand is dependent on the traffic. If there is no traffic (or Idle) for a pre-specified period of time (Max Idle Time), the connection will tear down automatically. And once there is traffic send or receive, the connection will be automatically on. If you want your Internet connection to remain active at all times, enter 0 in the Max Idle Time field. Note: Sometimes the connection cannot be disconnected although you specify a time to Max Idle Time because some applications visit the Internet continually in the background. Connect manually: You can click the Connect/Disconnect button to connect/disconnect connection immediately. This mode also supports the Max Idle Time function as Connect on demand mode. If you want your Internet connection to remain active at all times, enter 0 in the Max Idle Time field. Authentication Type: Some ISPs need a specific authentication type, please confirm it with your ISP or keep it Auto. Note: 3G settings is unavailable when operation mode is not 3G Router Mode and the backup is not enabled. Please tick the box in the next screen to enable 3G as a backup solution for Internet access or change settings on Operation Mode if you want to use 3G. 31

38 Figure 3-12 Click Modem Settings in Figure 3-11, 3G Modem settings can be shown as below. Figure 3-13 To upload 3G USB Modem Configuration File: 1. Click the Add New button. Then Figure 3-14 will pop up. 2. Click the Browse button in Figure 3-14, and then select the right file from the drop-down list. Click the Upload button to upload the file. Click the Back button to return to the previous page. Figure 3-14 Click advance in Figure 3-11, advanced settings can be shown as below. 32

39 Figure 3-15 Set the Dial Number and APN manually: Check the box and fill the Dial Number and APN blanks below if your ISP is not listed in the ISP list or the default values are not the latest ones. Dial Number: Enter the Dial Number provided by your ISP. APN: Enter the APN (Access Point Name) provided by your ISP. Username/Password: Enter the Username and Password provided by your ISP. These fields are case-sensitive. MTU size(in bytes): The default MTU (Maximum Transmission Unit) size is 1480 bytes, which is usually fine. For some ISPs, you need modify the MTU. This should not be done unless you are sure it is necessary for your ISP. Use the following IP Address: If your ISP specifies an IP address for you, click the checkbox, and fill the Static IP Address. Use the following DNS Servers: If your ISP specifies a DNS server IP address for you, click the checkbox, and fill the Primary DNS and Secondary DNS blanks below. The Secondary DNS is optional. Otherwise, the DNS servers will be assigned dynamically from ISP. Primary DNS: Enter the DNS IP address in dotted-decimal notation provided by your ISP. Secondary DNS: (Optional) Enter another DNS IP address in dotted-decimal notation provided by your ISP. Once the connection is successful, you will find the 3G screen is similar to Figure Click menu Status and you will see the 3G status is similar to Figure

40 Click the Save button to save your settings. Figure VLAN Choose Network Setting VLAN, you can view all the current groups on this page (shown in Figure 3-17Figure 3-17). Figure 3-17 VLAN: Enable or disable this function. Virtual LAN (VLAN) is a group of devices on one or more LANs that are configured so that they can communicate as if they were attached to the same LAN, when in fact they are located on a number of different LAN segments. Because VLANs are based on logical instead of physical connections, it is very flexible for user/host management, bandwidth allocation and resource optimization. If you want to active this function, this function must be enabled. Note: It is not allowed to disable the VLAN with Ethernet Connection enabled. To support this feature, you must create mapping groups with appropriate LAN and WAN interfaces using the Add button. The Remove button will remove the grouping and add the ungrouped interfaces to the Default group. Only the default group has IP interface. Click the Add button. You can add a new interface group in the next screen. For example, you want LAN1 and LAN3 to be a group called Group 1 over br_8_35_0 WAN interface, you can refer to the following figure. 34

41 Figure 3-18 Click Save to make the entry effective immediately LAN Choose Network LAN menu, and you will see the LAN screen (shown in Figure 3-19). Please configure the parameters for LAN ports according to the descriptions below. Figure 3-19 IP Address: You can configure the router s IP Address and Subnet Mask for LAN Interface. IP Address: Enter the router s local IP Address, then you can access to the Web-based Utility via the IP Address, the default value is Subnet Mask: Enter the router s Subnet Mask, the default value is Enable IGMP Snooping: If you select the option, please choose the IGMP Mode: Standard Mode or Blocking Mode. 35

42 Enable Second IP: You can configure the router s second IP Address and Subnet Mask for LAN Interface through which you can also access to the Web-based Utility as the default IP Address and Subnet Mask. DHCP Server: These settings allow you to configure the router s Dynamic Host Configuration Protocol (DHCP) server function. The DHCP server is enabled by default for the router s Ethernet LAN interface. DHCP service will supply IP settings to computers which are configured to automatically obtain IP settings that are connected to the router though the Ethernet port. When the router is set for DHCP, it becomes the default gateway for DHCP client connected to it. Keep in mind that if you change the IP address of the router, you must change the range of IP addresses in the pool used for DHCP on the LAN. Start IP Address: Enter a value for the DHCP server to start with when issuing IP addresses. The default Start IP Address is End IP Address: Enter a value for the DHCP server to end with when issuing IP addresses. The default End IP Address is Leased Time: The Leased Time is the amount of time in which a network user will be allowed connection to the router with their current dynamic IP address. Enter the amount of time, in hours, then the user will be leased this dynamic IP address. After the dynamic IP address has expired, the user will be automatically assigned a new dynamic IP address. The default is 1440 minutes. The detailed configuration about DHCP server, please refer to section 3.7 DHCP Server IPv6 LAN Settings Choose menu Network IPv6 LAN Settings, you can configure LAN IPv6 interface for your router. Figure 3-20 Address Auto configuration Type: Select a type to assign IPv6 addresses to the computers in your LAN.SLAAC and DHCPv6 Server are provided. 1) If SLAAC is selected, it doesn t need to be configured. 2) If DHCPv6 Server is selected, please complete the following parameters. 36

43 Figure 3-21 Start IPv6 Address: Enter a value for the DHCPv6 server to start with when issuing IPv6 addresses. End IPv6 Address: Enter a value for the DHCPv6 server to end with when issuing IPv6 addresses. Leased Time: The Leased Time is the amount of time in which a network user will be allowed connection to the router with their current dynamic IPv6 address. Enter the amount of time, in hours, then the user will be leased this dynamic IPv6 address. After the dynamic IPv6 address has expired, the user will be automatically assigned a new dynamic IPv6 address. The default is seconds. Site Prefix Configuration Type: Select a type to assign prefix to IPv6 addresses. Delegated and Static are provided. 1) If Delegated is selected, please complete the following parameters. Figure 3-22 Prefix Delegated WAN Connection: Select a WAN connection form the drop-down list to assign prefix. 2) If Static is selected, please complete the following parameters. Figure 3-23 Site Prefix: Enter a value for the site prefix. Site Prefix Length: Enter a value for the site prefix length. Click the Save button to save the settings MAC Clone Choose menu Advanced Setup MAC Clone, you can configure the MAC address of the WAN Interface as shown below. 37

44 The WAN Interface List displays the Lay2 Interfaces you have configured on the section WAN Settings and its default MAC Address. You can select corresponding WAN Interface from the drop-down list and click Clone button to clone your current PC MAC, and then click Save. Note: Figure 3-24 Only the WAN Ports can use MAC Address Clone function. All the clone MAC addresses must not be the same with each other ALG Settings Choose menu Advanced Setup ALG Settings, and then you can configure the basic security in the screen as shown in Figure Figure 3-25 Virtual Private Network (VPN) - VPN Passthrough must be enabled if you want to allow VPN tunnels using VPN protocols to pass through the router. PPTP Passthrough - Point-to-Point Tunneling Protocol (PPTP) allows the Point-to-Point Protocol (PPP) to be tunneled through an IP network. To allow PPTP tunnels to pass through the router, click Enable. 38

45 L2TP Passthrough - Layer Two Tunneling Protocol (L2TP) is the method used to enable Point-to-Point sessions via the Internet on the Layer Two level. To allow L2TP tunnels to pass through the router, click Enable. IPSec Passthrough - Internet Protocol security (IPSec) is a suite of protocols for ensuring private, secure communications over Internet Protocol (IP) networks, through the use of cryptographic security services. To allow IPSec tunnels to pass through the router, click Enable. Application Layer Gateway (ALG) - It is recommended to enable Application Layer Gateway (ALG) because ALG allows customized Network Address Translation (NAT) traversal filters to be plugged into the gateway to support address and port translation for certain application layer "control/data" protocols such as FTP, TFTP etc. FTP ALG - To allow FTP clients and servers to transfer data across NAT, click Enable. TFTP ALG - To allow TFTP clients and servers to transfer data across NAT, click Enable. H323 ALG - To allow H323 clients and servers to transfer data across NAT, click Enable. SIP ALG- To allow SIP clients and servers to transfer data across NAT, click Enable. Click the Save button to save your settings ADSL Settings Choose Advanced Setup ADSL Settings, you can select the ADSL Modulation Type and Annex Type in the next screen. The ADSL feature can be selected when you meet the physical connection problem. Please check the proper settings with your Internet service provider. Figure 3-26 DSL Modulation Type: Select the DSL operation Modulation Type which your DSL connection uses. Annex Type: Select the DSL operation Annex Type which your DSL connection uses. Click the Save button to save your settings. 3.6 IPTV Choose IPTV, and you will see the screen as shown in Figure

46 Figure 3-27 Enable IPTV: Check this box to enable IPTV. If this checkbox is selected, please set the following parameters as shown in the figure below. Make sure the following settings are correct. VPI (0~255): Identifies the virtual path between endpoints in an ATM network. The valid range is from 0 to 255. Please input the value provided by your ISP. VCI (1~65535): Identifies the virtual channel endpoints in an ATM network. The valid range is from 1 to (1 to 31 is reserved for well-known protocols). Please input the value provided by your ISP. Click the Save button to save your settings. To add a wireless connection for IPTV: 1. Click the Add a wireless connection for IPTV button. Then Figure 3-28 will pop up. 2. Configure the settings please refer to Section Basic Settings. 40

47 Figure 3-28 Click Save to save your settings. 3.7 DHCP Server Choose DHCP Server, you can see the next submenus: Click any of them, and you will be able to configure the corresponding function DHCP Settings Choose menu DHCP Server DHCP Settings, you can configure the DHCP Server on the page as shown in Figure 3-29.The router is set up by default as a DHCP (Dynamic Host Configuration Protocol) server, which provides the TCP/IP configuration for all the PC(s) that are connected to the router on the LAN. 41

48 Figure 3-29 Start IP Address: Enter a value for the DHCP server to start with when issuing IP addresses. The default Start IP Address is End IP Address: Enter a value for the DHCP server to end with when issuing IP addresses. The default End IP Address is Address Lease Time: The Leased Time is the amount of time in which a network user will be allowed connection to the router with their current dynamic IP address. Enter the amount of time, in hours, then the user will be leased this dynamic IP address. After the dynamic IP address has expired, the user will be automatically assigned a new dynamic IP address. The default is 24 hours. Default Gateway - (Optional.) It is suggested to input the IP address of the LAN port of the router. The default value is Default Domain - (Optional.) Input the domain name of your network. Primary DNS - (Optional.) Input the DNS IP address provided by your ISP or consult your ISP. Secondary DNS - (Optional.) Input the IP address of another DNS server if your ISP provides two DNS servers. DHCP Relay: Select Relay, then you will see the next screen, and the router will work as a DHCP Relay. A DHCP relay is a computer that forwards DHCP data between computers that request IP addresses and the DHCP server that assigns the addresses. Each of the device's interfaces can be configured as a DHCP relay. If it is enabled, the DHCP requests from local PCs will forward to the DHCP server runs on WAN side. To have this function working properly, please run on router mode only, disable the DHCP server on the LAN port, and make sure the routing table has the correct routing entry. 42

49 Note: 1) To use the DHCP server function of the router, you must configure all computers on the LAN as "Obtain an IP Address automatically". 2) You have to disable NAT of the WAN connections, or the DHCP Relay may not take effect. 3) If you select Disabled, the DHCP function will not take effect. Click the Save button to save your settings Clients List Choose menu DHCP Server Clients List, you can view the information about the clients attached to the router in the screen as shown in Figure Client Name: The name of the DHCP client Figure 3-30 MAC Address: The MAC address of the DHCP client IP Address: The IP address that the router has allocated to the DHCP client Valid Time: The time of the DHCP client leased. After the dynamic IP address has expired, a new dynamic IP address will be automatically assigned to the user. You cannot change any of the values on this page. To update this page and to show the current attached devices, click the Refresh button Address Reservation Choose menu DHCP Server Address Reservation, you can view and add a reserved address for clients via the next screen (shown in Figure 3-31).When you specify a reserved IP address for a PC on the LAN, that PC will always receive the same IP address each time when it accesses the DHCP server. Reserved IP addresses should be assigned to the servers that require permanent IP settings. 43

50 Figure 3-31 MAC Address: The MAC address of the PC for which you want to reserve an IP address. IP Address: The IP address reserved for the PC by the router. Status: The status of this entry either Enabled or Disabled. To Reserve an IP address: 1. Click the Add New button. Then Figure 3-32 will pop up. 2. Enter the MAC address (in XX:XX:XX:XX:XX:XX format.) and IP address (in dotted-decimal notation) of the computer for which you want to reserve an IP address. 3. Click the Save button. To modify or delete an existing entry: Figure Click the Edit in the entry you want to modify. If you want to delete the entry, click the Delete. 2. Modify the information. 3. Click the Save button. Click the Enable/Disable Selected button to make selected entries enabled/disabled. Click the Delete Selected button to selected entries Conditional Pool Choose menu DHCP Server Conditional Pool, you can see the next screen (shown in Figure 3-33). This page displays vendor class settings and allows you to set parameters for vendor class by clicking corresponding buttons. 44

51 Figure 3-33 To add a vendor class: 1. Click the Add New button. Then Figure 3-34 will pop up. 2. Enter parameters for the vendor class. Click the Save button. To modify or delete an existing entry: Figure Click the Edit in the entry you want to modify. If you want to delete the entry, click the Delete. 2. Modify the information. 3. Click the Save button. Click the Enable/Disable Selected button to make selected entries enabled/disabled. Click the Delete Selected button to selected entries. 3.8 Wireless Choose Wireless, there are seven submenus to configure Wireless LAN settings. Click any of them, and you will be able to configure the corresponding function. The detailed explanations for each submenu are provided below. 45

52 3.8.1 Basic Settings Choose Wireless Basic Settings, you will see the screen of Wireless Basic Settings shown as below. The basic settings for wireless networking are set on this screen. Figure 3-35 This page allows you to configure basic features of the wireless LAN interface. You can enable or disable the wireless LAN interface, hide the network from active scans, set the wireless network name (also known as SSID) and restrict the channel set based on Region requirements. SSID (1-3): Up to four SSIDs for each BSS (Basic Service Set) can be entered in the filed SSID1 ~ SSID3. The name can be up to 32 characters. The same name (SSID) must be assigned to all wireless devices in your network. Check the Enable box to enable the desired SSID. The wireless stations connected to different SSIDs can not communicate with each other. Region: Select your region from the pull-down list. This field specifies the region where the wireless function of the Router can be used. It may be illegal to use the wireless function of the Router in a region other than one of those specified in this field. If your country or region is not listed, please contact your local government agency for assistance. 46

53 Mode: Select the desired mode. 11Mbps : Select if all of your wireless clients are b. 54Mbps : Select if all of your wireless clients are g. 300Mbps : Select only if all of your wireless clients are n. Mixed b/g: Select if you are using both b and g wireless clients. Mixed b/g/n: Select if you are using a mix of b, 11g, and 11n wireless clients. Select the desired wireless mode. When g mode is selected, only g wireless stations can be connected to the router. When n mode is selected, only n wireless stations can connect to the router. It is strongly recommended that you set the Mode to b&g&n, and all of b, g, and n wireless stations can connect to the router. Channel: Select the channel you want to use from the drop-down List of Channel. This field determines which operating frequency will be used. It is not necessary to change the wireless channel unless you notice interference problems with another nearby access point. Channel Width: Select the channel width from the drop-down list. The default setting is automatic, which can adjust the channel width for your clients automatically. Note: If 11b only, 11g only, or 11bg mixed is selected in the Mode field, the Channel Width selecting field will turn grey and the value will become 20M, which is unable to be changed. Enable SSID Broadcast: When wireless clients survey the local area for wireless networks to associate with, they will detect the SSID broadcast by the router. If you select the Enable SSID Broadcast checkbox, the Wireless Router will broadcast its name (SSID) on the air. Enable WDS: Check this box to enable WDS. With this function, the router can bridge two or more Wlans. If this checkbox is selected, you will have to set the following parameters as shown in the figure below. Make sure the following settings are correct. SSID (to be bridged): The SSID of the AP your router is going to connect to as a client. You can also use the search function to select the SSID to join. 47

54 BSSID (to be bridged): The BSSID of the AP your router is going to connect to as a client. You can also use the search function to select the BSSID to join. Scan: Click this button, you can search the AP which runs in the current channel. Key Type: This option should be chosen according to the AP's security configuration. It is recommended that the security type is the same as your AP's security type WEP Index: This option should be chosen if the key type is WEP(ASCII) or WEP(HEX). It indicates the index of the WEP key. Authentication Type: This option should be chosen if the key type is WEP(ASCII) or WEP(HEX). It indicates the authorization type of the Root AP. Encryption: You can select either TKIP or AES. Password: If the AP your router is going to connect needs password, you need to fill the password in this blank. Click Save to save your settings WPS Settings This section will guide you to add a new wireless device to an existing network quickly by WPS (also called QSS) function. a). Choose menu WPS Settings, and you will see the next screen (shown in Figure 3-36 ). Figure 3-36 WPS: Enable or disable the WPS function here. Current PIN: The current value of the router's PIN is displayed here. The default PIN of the router can be found in the label or User Guide. Restore PIN: Restore the PIN of the router to its default. Generate New PIN: Click this button, and then you can get a new random value for the router's PIN. You can ensure the network security by generating a new PIN. Add device: You can add a new device to the existing network manually by clicking this button. b). To add a new device: If the wireless adapter supports Wi-Fi Protected Setup (WPS), you can establish a wireless connection between wireless adapter and router using either Push Button Configuration (PBC) method or PIN method. Note: To build a successful connection by WPS, you should also do the corresponding configuration of the new device for WPS function meanwhile. 48

55 I. Use the Wi-Fi Protected Setup Button Use this method if your client device has a Wi-Fi Protected Setup button. Step 1: Press the WPS button on the front panel of the router for more than 5 seconds, as shown in the following figure. You can also keep the default WPS Status as Enabled and click the Add device button in Figure 3-36, then Choose Press the button of the new device in two minutes and click Connect. (Shown in the following figure) Figure 3-37 Step 2: Press and hold the WPS button of the client device directly. Step 3: The Wi-Fi Protected Setup LED flashes for two minutes during the Wi-Fi Protected Setup process. Step 4: When the WPS LED is on, the client device has successfully connected to the router. Refer back to your client device or its documentation for further instructions. II. Enter the client device s PIN on the router Use this method if your client device has a Wi-Fi Protected Setup PIN number. Step 1: Keep the default WPS Status as Enabled and click the Add device button in Figure 3-36, then the following screen will appear. Figure 3-38 Step 2: Enter the PIN number from the client device in the field on the above WPS screen. Then click Connect button. Step 3: Connect successfully will appear on the screen of Figure 3-38, which means the client device has successfully connected to the router. 49

56 III. Enter the router s PIN on your client device Use this method if your client device asks for the router s PIN number. Step 1: On the client device, enter the PIN number listed on the router s Wi-Fi Protected Setup screen. (It is also labeled on the bottom of the router.) Step 2: The Wi-Fi Protected Setup LED flashes for two minutes during the Wi-Fi Protected Setup process. Step 3: When the WPS LED is on, the client device has successfully connected to the router. Step 4: Refer back to your client device or its documentation for further instructions. Note: 1) The WPS LED on the router will light green for five minutes if the device has been successfully added to the network. 2) The WPS function cannot be configured if the Wireless Function of the router is disabled. Please make sure the Wireless Function is enabled before configuring the WPS Wireless Security Choose menu Wireless Wireless Security, you can configure the security settings of your wireless network. There are three wireless security modes supported by the router: WPA/WPA2 Personal, WPA/WPA2 Enterprise, WEP (Wired Equivalent Privacy). 50

57 Figure 3-39 SSID: Select the SSID from the drop-down list. Disable Wireless Security: If you do not want to use wireless security, check this radio button. But it s strongly recommended to choose one of the following modes to enable security. WPA/WPA2 Personal (Recommended): It s the WPA/WPA2 authentication type based on pre-shared passphrase. Authentication Type - You can choose the version of the WPA-Personal security on the drop-down list. The default setting is Automatic, which can select WPA-Personal (Pre-shared key of WPA) or WPA2-Personal (Pre-shared key of WPA) automatically based on the wireless station's capability and request. Encryption - You can select either Auto, or TKIP or AES. Wireless Password - You can enter ASCII characters between 8 and 63 characters or 8 to 64 Hexadecimal characters. 51

58 Group Key Update Period - Specify the group key update interval in seconds. The value should be 30 or above. Enter 0 to disable the update. WPA/WPA2 Enterprise: It s based on Radius Server. Authentication Type: You can choose the version of the WPA security on the drop-down list. The default setting is Auto, which can select WPA (Wi-Fi Protected Access) or WPA2 (WPA version 2) automatically based on the wireless station's capability and request. Encryption - You can select either Auto, or TKIP or AES. RADIUS Server IP - Enter the IP address of the Radius Server. RADIUS Server Port - Enter the port that radius service used. RADIUS Server Password - Enter the password for the Radius Server. Group Key Update Period - Specify the group key update interval in seconds. The value should be 30 or above. Enter 0 to disable the update. WEP: It is based on the IEEE standard. Authentication Type - You can choose the type for the WEP security on the drop-down list. The default setting is Open System. If you choose Auto, the router can select Shared Key or Open System authentication type automatically based on the wireless station's capability and request. WEP Key Format - Hexadecimal and ASCII formats are provided here. Hexadecimal format stands for any combination of hexadecimal digits (0-9, a-f, A-F) in the specified length. ASCII format stands for any combination of keyboard characters in the specified length. WEP Key - Select which of the four keys will be used and enter the matching WEP key that you create. Make sure these values are identical on all wireless stations in your network. Key Type - You can select the WEP key length (64-bit, or 128-bit, or 152-bit.) for encryption. "Disabled" means this WEP key entry is invalid. 64-bit - You can enter 10 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not promoted) or 5 ASCII characters. 52

59 Note: 128-bit - You can enter 26 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not promoted) or 13 ASCII characters. If you do not set the key, the wireless security function is still disabled even if you have selected Shared Key as Authentication Type. Be sure to click the Save button to save your settings on this page Wireless Schedule Choose menu Wireless Wireless Schedule, you can configure the Task Schedule as shown below. Note: Figure 3-40 The time you set is the period you need the wireless off. Before configure the wireless schedule, please set system time first which refer to Time Settings, then you can enable or disable Wireless Schedule. Apply To: Select the day or days you need the wireless off. Start Time, End Time: You can select all day-24 hours or you may enter the Start Time and End Time in the corresponding field. Add: Click this button to add your selected time to the below table. Click the Clear Schedule button to clear your settings in the table. Click Save to complete the settings. 53

60 3.8.5 Wireless MAC Filtering Choose menu Wireless MAC Filtering, you can control the wireless access by configuring the Wireless MAC Filtering function, shown in Figure Figure 3-41 To filter wireless users by MAC Address, click Enable. The default setting is Disabled. MAC Address: The wireless station's MAC address that you want to filter. Status: The status of this entry, either Enabled or Disabled. Host:Here displays the host selected from the drop-down list. Description: A simple description of the wireless station. To Add a Wireless MAC Address filtering entry, click the Add New button. The following page will appear, shown in Figure 3-42: Figure 3-42 To add or modify a MAC Address Filtering entry, follow these instructions: 1. Enter the appropriate MAC Address into the MAC Address field. The format of the MAC Address is XX:XX:XX:XX:XX:XX (X is any hexadecimal digit). For example: 00:1E:A6:11:22: Give a simple description for the wireless station in the Description field. For example: Wireless station A. 3. Select your host from the drop-down list. 4. Select Enabled or Disabled for this entry on the Status drop-down list. 5. Click the Save button to save this entry. To edit or delete an existing entry: 54

61 1. Click the Edit in the entry you want to modify. 2. Modify the information. 3. Click the Save button. Click the Enable/ Disabled Selected button to make selected entries enabled or disabled. Click the Delete Selected button to selected entries. For example: If you desire that the wireless station A with MAC address 00:1D:0F:11:22:33 and the wireless station B with MAC address 00:0A:EB:00:07:5F are able to access the router, but all the other wireless stations cannot access the router, you can configure the Wireless MAC Address Filtering list by following these steps: 1. Click the Enable button to enable this function. 2. Select the radio button Allow the stations specified by any enabled entries in the list to access for Filtering Rules. 3. Delete all or disable all entries if there are any entries already. 4. Click the Add New button. 1) Enter the MAC address 00:1E:A6:11:22:33/00:0A:EB:00:07:5F in the MAC Address field. 2) Enter wireless station A/B in the Description field. 3) Select Enabled in the Status drop-down list. 4) Click the Save button. 5) Click the Back button. The filtering rules that configured should be similar to the following list: Wireless Advanced Choose menu Wireless Wireless Advanced, you can configure the advanced settings of your wireless network. 55

62 Figure 3-43 Transmit Power: Here you can specify the transmit power of router. You can select High, Middle or Low which you would like. High is the default setting and is recommended. Beacon Interval: Enter a value between milliseconds for Beacon Interval here. The beacons are the packets sent by the router to synchronize a wireless network. Beacon Interval value determines the time interval of the beacons. The default value is 100. RTS Threshold: Here you can specify the RTS (Request to Send) Threshold. If the packet is larger than the specified RTS Threshold size, the router will send RTS frames to a particular receiving station and negotiate the sending of a data frame. The default value is Fragmentation Threshold: This value is the maximum size determining whether packets will be fragmented. Setting the Fragmentation Threshold too low may result in poor network performance because of excessive packets is the default setting and is recommended. DTIM Interval: This value determines the interval of the Delivery Traffic Indication Message (DTIM). A DTIM field is a countdown field informing clients of the next window for listening to broadcast and multicast messages. When the router has buffered broadcast or multicast messages for associated clients, it sends the next DTIM with a DTIM Interval value. You can specify the value between Beacon Intervals. The default value is 1, which indicates the DTIM Interval is the same as Beacon Interval. Enable Short GI: This function is recommended for it will increase the data capacity by reducing the guard interval time. Enabled Client isolation: This function can isolate wireless stations on your network from each other. Wireless devices will be able to communicate with the router but not with each other. To use this function, check this box. Client isolation is disabled by default. Enable WMM: WMM function can guarantee the packets with high-priority messages being transmitted preferentially. It is strongly recommended. Note: If you are not familiar with the setting items in this page, it's strongly recommended to keep the provided default values; otherwise it may result in lower wireless network performance. 56

63 3.8.7 Wireless Status Choose menu Wireless Wireless Status, you can see the MAC Address, Current Status, Received Packets and Sent Packets for each connected wireless station. Figure 3-44 MAC Address: The connected wireless station's MAC address. Current Status: The connected wireless station's running status, one of STA-AUTH/ STA-ASSOC/ STA-JOINED/ WPA/ WPA-PSK/ WPA2/ WPA2-PSK/ AP-UP/ AP-DOWN/ Disconnected. Received Packets: Packets received by the station. Sent Packets: Packets sent by the station. You cannot change any of the values on this page. To update this page and to show the current connected wireless stations, click on the Refresh button. 3.9 Guest Wi-Fi There are two submenus under the Guest Network menu: Basic Settings and Guest Wi-Fi Status. Click any of them, and you will be able to scan or configure the corresponding function. The detailed explanations for each submenu are provided below Basic Settings Choose menu Guest Network Basic Settings, and you will see the screen as shown in Figure This feature allows you to create a separate network for your guests without allowing them to access your main network and the computers connected to it. Figure

64 You can enable or disable Guest Network. When you enable this function, you could set wireless parameters for Guest Network. SSID: The guest network name. When setting up a Guest network, it is strongly recommended to use a name that easily distinguishes it from your primary network. The default name is Wireless_Guestxx (xx is the last two numbers of MAC address). Security: The default value is disabled, but it s strongly recommended to enable WPA/WPA2-Personal. WPA/WPA2-Personal is the WPA/WPA2 authentication type based on pre-shared passphrase. Authentication Type: Select the Authentication Type from the drop-down list, the default method is Auto, and you can leave it as a default setting. Encryption: You can select either Auto, or TKIP or AES. Wireless Password: You can enter ASCII characters between 8 and 63 characters or 8 to 64 Hexadecimal characters. Group Key Update Period: Specify the group key update interval in seconds. The value should be 30 or above. Enter 0 to disable the update. Allow Guests to access my Local Network: The guests have access to your Local Network, but can not login the router s web management interface. Allow Guests to access my USB Storage Sharing: The guests can access the specified files on the USB storage device via the function of USB Storage Sharing, but the function of FTP Server, Media Server are not available in Guest Network. For more details please refer to Storage Sharing. Guest Network Isolation: This function can isolate wireless clients on your guest network from each other. Client isolation is disabled by default. Guest Network Bandwidth Control: With this function, you can configure the Upstream Bandwidth and Downstream Bandwidth for guest network. Click Save to save your settings Guest Wi-Fi Status Choose menu Guest Network Guest Wi-Fi Status, you can see the MAC Address, Current Status, Received Packets and Sent Packets for each connected wireless station. MAC Address: The connected wireless station's MAC address. Current Status: The connected wireless station's running status. Received Packets: Packets received by the station. Sent Packets: Packets sent by the station. You cannot change any of the values on this page. To update this page and to show the current connected wireless stations, click on the Refresh button. 58

65 3.10 USB Storage There are six submenus under the USB Settings menu, USB Mass Storage, User Setting, Storage Sharing, FTP Server, Media Server and Print Server. Click any of them, and you will be able to configure the corresponding function USB Mass Storage Choose menu USB Settings USB Mass Storage, you can configure a USB disk drive attached to the router and view volume and share properties such as share name, capacity, status, and action, etc on this page as shown below. Figure 3-46 Volume: The volume name of the USB drive the users have access to. File System: The system of the USB drive. Capacity: The storage capacity of the USB driver. Status: Indicates the shared or non-shared status of the volume. Online means volume can be shared, while Offline means volume can not be shared. If Deactivate in Action field is enabled, Disabled will be displayed in the Status field, which means volume can not be shared. Action: When the volume is shared, you can click the Deactivate to stop sharing the volume; when volume is non-shared, you can click the Enable button to share the volume. Click Disconnect to safely remove the USB storage device that is connected to USB port. 59

66 Note: Before removing the USB storage device, you should click Disconnect to make sure that all your data have been saved completely. Removing device directly may cause your USB storage device crashed User Accounts You can specify the user name and password for Storage Sharing and FTP Server users on this page. Storage Sharing users can access the folders by entering the following URL into the address field of your browser or Windows Explorer, such as. \\ FTP Server users can log into the FTP Server via FTP Client. There are five users here, which provide means to control the access to the USB mass storage by Storage Sharing or FTP. The Super User has the right to read and write to Storage Sharing and FTP Server. Figure 3-47 To add a new user account, please follow the steps below: 1. Choose the index from the drop-down list of Choose Index. 2. Self-define a New Username. 3. Enter the password in the New Password field. 4. Re-enter the password in the Confirm Password field. Click the Set button, and then a new entry will be added in the table Storage Sharing Choose menu USB Settings Storage Sharing, you can configure a USB disk drive attached to the router and view volume and share properties on this page as shown below. 60

67 Figure 3-48 Server Status: Indicates the Storage Sharing's current status. Anonymous access to all the volumes: This function is enabled by default, so users can access all activated volumes of Storage Sharing without accounts. If you want to add a shared folder which does not allow anonymous login, uncheck the box to disable this function. And Folder Table will be displayed as shown below. Share Name: This folder's display name. Directory: The real full path of the specified folder. User Access: The authorization of the user is displayed. * users mean Super Users who have the full-access permission to all activated volumes and share folders. Grey users mean the users who have no right to use this function. Others are common users. Status: The status of the entry is enabled or disabled. Edit: Click Edit in the table, and then you can modify the entry. To add a new folder, follow the instructions below. 1. Click Add New Folder in Figure

68 Figure Click the Browse button, and then select the Select Volume from the drop-down list. 3. Enter display name of the share folder in Share Name filed. 4. Click the Apply button to apply the settings. You can click the upper button to go to the upper folder Click the Enable/Disable Selected button to enable or disable the selected entries. Click the Delete Selected button to delete the selected entries. Note: 1. The max share folders number is 10. If you want to share a new folder when the number has reached 10, you can delete an existing share folder and then add a new one. 2. If you want to change the Storage Sharing settings, you can click the Apply button to make the changes take effect FTP Server Choose menu USB Settings FTP Server, you can create an FTP server that can be accessed from the Internet or your local network. 62

69 Figure 3-50 Server Status: Indicates the FTP Server's current status. Internet Access: If Internet Access is enabled, user(s) in public network can access FTP server via Internet Address. Internet Address: If Internet Access is enabled, WAN IP will be displayed here. Service Port: Enter the FTP Port number to use. The default is 21. Share Name: This folder's display name. Directory: The real full path of the specified folder. User Index: The authorization of the user is displayed. Status: The status of the entry is enabled or disabled. Edit: Click Edit in the table, and then you can modify the entry. To add a new folder, follow the instructions below. 1. Click Add New Folder in Figure

70 Figure Click the Browse button, and then select the Select Volume from the drop-down list. 3. Enter display name of the share folder in Share Name filed. 4. Click the Apply button to apply the settings. You can click the upper button to go to the upper folder. Click the Enable/Disable Selected button to enable or disable the selected entries. Click the Delete Selected button to delete the selected entries. Note: 1. The max share folders number is 10. If you want to share a new folder when the number has reached 10, you can delete an existing share folder and then add a new one. 2. If you want to change the FTP settings, you can click the Apply button to make the changes take effect Media Server Choose Media Server, you can create media server that allows you to share stored content with other computers and devices on your home network and on the Internet. Figure 3-52 Server Enable: Select this box to enable this function. 64

71 Server Name: The name of this Media Server. To add a new share folder for your media server, please follow the instructions below: a) Click Add New Folder button, and you will see the screen as shown in Figure b) Enter the name of the share folder in Share Name field. c) Click the Apply button to apply the configuration. Figure 3-53 d) Click the Scan Now to scan all the share folders immediately. You can also select the Auto-Scan, at same time, select an auto scan interval time by drop-down list. In this case, the media server will auto scan the share folders. Note: The max share folders number is 6. If you want share a new folder when the numbers has been reached to be 6, you can delete a share folder and then add a new one Routing Choose Routing, it includes three menus: Default Gateway, Static Route, IPv6 Static Route and RIP Settings. The detailed descriptions are provided below Default Gateway Choose Route Settings Default Gateway, you can see the Default Gateway screen. You can select a WAN Interface from the drop-down list as the system default gateway. 65

72 Figure 3-54 Click the Add Interface button, you can add WAN Interfaces. Click the Save button to save your settings Static Route Choose Route Settings Static Route. You can see the Static Route screen, this screen allows you to configure the static routes (shown in Figure 3-55). A static route is a pre-determined path that network information must travel to reach a specific host or network. To add static routing entries: Figure Click the Add New button in Figure 3-55, and you will see the screen as shown in Figure Enter the following data: Figure 3-56 Destination IP Address: The Destination IP Address is the address of the network or host that you want to assign to a static route. Subnet Mask: The Subnet Mask determines which portion of an IP Address is the network 66

73 portion, and which portion is the host portion. Gateway: Here you should type the Gateway address correctly, and the option for Interface will adopt the default Gateway address for the Static Route. Interface: Select the Interface name in the text box, or else, the default Use Interface will be adopted for the Static Route. Status: Select Enabled or Disabled from the drop-down list. 3. Click Save to save your settings as shown in Figure To modify or delete an existing entry: 1. Find the desired entry in the table. 2. Click Edit as desired on the Edit column. Click the Enable/ Disabled Selected button to make selected entries enabled/ disabled. Click the Delete Selected button to delete selected entries IPv6 Static Route Choose Route Settings IPv6 Static Route. You can see the IPv6 Static Route screen. This screen allows you to configure the IPv6 static routes (shown in Figure 3-57). An IPv6 static route is a pre-determined path that network information must travel to reach a specific host or network. Figure 3-57 To add a new entry, follow the instructions below. 1. Click the Add New button in Figure 3-57, and you will see the screen as shown in Figure Enter the following data: Figure

74 Destination IPv6 Address: The Destination IPv6 Address is the address of the network or host that you want to assign to an IPv6 static route. Prefix Length: The prefix length of the destination IPv6 address. Gateway: Here you should type the IPv6 Gateway address correctly, and the option for Interface will adopt the default IPv6 Gateway address for the IPv6 Static Route. Interface: Select the Interface name from the drop-down list, or else, the default Interface will be adopted for the IPv6 Static Route. Status: Select Enabled or Disabled from the drop-down list. 3. Click Save to save your settings. To modify or delete an existing entry: 1. Find the desired entry in the table. 2. Click Edit as desired on the Edit column. Click the Enable/ Disabled Selected button to make selected entries enabled/ disabled. Click the Delete Selected button to delete selected entries RIP Settings Choose Route Settings RIP Settings, you can see the RIP (Routing Information Protocol) screen which allows you to configure the RIP. Figure 3-59 Note: RIP cannot be configured on the WAN Interface which has NAT enabled (such as PPPoE) Forwarding There are four submenus under the Forwarding menu: Virtual Servers, Port Triggering, DMZ and UPnP. Click any of them, and you will be able to configure the corresponding function. 68

75 Virtual Servers Choose menu Forwarding Virtual Servers, and then you can view and add virtual servers in the next screen (shown in Figure 3-60). Virtual servers can be used for setting up public services on your LAN. A virtual server is defined as a service port, and all requests from Internet to this service port will be redirected to the computer specified by the server IP. Any PC that was used for a virtual server must have a static or reserved IP address because its IP address may change when using the DHCP function. Figure 3-60 Service Port: The numbers of External Service Ports. You can enter a service port or a range of service ports (the format is XXX YYY; XXX is the Start port and YYY is the End port). IP Address: The IP address of the PC running the service application. Protocol: The protocol used for this application, either TCP, UDP, or All (all protocols supported by the router). Status: The status of this entry, "Enabled" means the virtual server entry is enabled. Edit: To modify or delete an existing entry. To setup a virtual server entry: 1. Click the Add New button. (pop-up Figure 3-61) 2. Select the service you want to use from the Common Service Port list. If the Common Service Port menu does not list the service that you want to use, enter the number of the service port or service port range in the Service Port field. 3. Select the service you want to use from the Use Interface list. 4. Enter the IP address of the computer running the service application in the IP Address field. 5. Select the protocol used for this application in the Protocol drop-down list, either TCP, UDP, or All. 6. Select the Enabled option in the Status drop-down list. Click the Save button. 69

76 Figure 3-61 Note: It is possible that you have a computer or server that has more than one type of available service. If so, select another service, and type the same IP address for that computer or server. To modify or delete an existing entry: 1. Find the desired entry in the table. 2. Click Edit as desired on the Edit column. Click the Enable/ Disabled Selected button to make selected entries enabled/ disabled. Click the Delete Selected button to delete selected entries. Note: If you set the service port of the virtual server as 80, you must set the Web management port on System Tools > Remote Management page to be any other value except 80 such as Otherwise there will be a conflict to disable the virtual server Port Triggering Choose menu Forwarding Port Triggering, you can view and add port triggering in the next screen (shown in Figure 3-62). Some applications require multiple connections, like Internet games, video conferencing, Internet telephoning and so on. Port Triggering is used for some of these applications that cannot work with a pure NAT router. Figure 3-62 To add a new rule, follow the steps below. 1. Click the Add New button, the next screen will pop-up as shown in Figure

77 2. Select a common application from the Common Service Port drop-down list, then the Trigger Port field and the Open Ports field will be automatically filled. If the Common Service Port do not have the application you need, enter the Trigger Port and the Open Ports manually. 3. Select the protocol used for Trigger Port from the Trigger Protocol drop-down list, either TCP, UDP, or All. 4. Select the protocol used for Incoming Ports from the Incoming Protocol drop-down list, either TCP or UDP, or All. 5. Select Enable in Status field. 6. Click the Save button to save the new rule. Figure 3-63 Trigger Port: The port for outgoing traffic. An outgoing connection using this port will trigger this rule. Trigger Protocol: The protocol used for Trigger Ports, either TCP, UDP, or All (all protocols supported by the router). Open Port: The port or port range used by the remote system when it responds to the outgoing request. A response using one of these ports will be forwarded to the PC which triggered this rule. You can input at most 5 groups of ports (or port sections). Every group of ports must be separated with ",", for example, , 2046, , 2085, Open Protocol: The protocol used for Incoming Port, either TCP, UDP, or ALL (all protocols supported by the router). Status: The status of this entry, Enabled means the Port Triggering entry is enabled. Modify: To modify or delete an existing entry. Common Service Port: Some popular applications already listed in the drop-down list of Open Protocol. To modify or delete an existing entry: 1. Find the desired entry in the table. 2. Click Edit as desired on the Edit column. Click the Enable/ Disabled Selected button to make selected entries enabled/ disabled. 71

78 Click the Delete Selected button to delete selected entries. Once the router is configured, the operation is as follows: 1. A local host makes an outgoing connection to an external host using a destination port number defined in the Trigger Port field. 2. The router records this connection, opens the incoming port or ports associated with this entry in the Port Triggering table, and associates them with the local host. 3. When necessary, the external host will be able to connect to the local host using one of the ports defined in the Incoming Ports field. Note: 1. When the trigger connection is released, the corresponding opened ports will be closed. 2. Each rule can only be used by one host on the LAN at a time. The trigger connection of other hosts on the LAN will be refused. 3. Open Ports ranges cannot overlap each other DMZ Choose menu Forwarding DMZ, and then you can view and configure DMZ host in the screen (shown in Figure 3-64).The DMZ host feature allows one local host to be exposed to the Internet for a special-purpose service such as Internet gaming or videoconferencing. The router forwards packets of all services to the DMZ host. Any PC whose port is being forwarded must have its DHCP client function disabled and should have a new static IP Address assigned to it because its IP Address may be changed when using the DHCP function. Figure 3-64 To assign a computer or server to be a DMZ server: 1. Click the Enable button. 2. Enter the IP address of a local PC that is set to be DMZ host in the DMZ Host IP Address field. 3. Click the Save button UPnP Choose menu Forwarding UPnP, and then you can view the information about UPnP in the screen (shown in Figure 3-65). The Universal Plug and Play (UPnP) feature allows the devices, such as Internet computers, to access the local host resources or devices as needed. UPnP devices can be automatically discovered by the UPnP service application on the LAN. 72

79 Figure 3-65 Current UPnP Status: UPnP can be enabled or disabled by clicking the Enable or Disable button. This feature is enabled by default. Current UPnP Settings List: This table displays the current UPnP information. App Description: The description about the application which initiates the UPnP request. External Port: The port which the router opened for the application. Protocol: The type of protocol which is opened. Internal Port: The port which the router opened for local host. IP Address: The IP address of the local host which initiates the UPnP request. Status: Either Enabled or Disabled. "Enabled" means that the port is still active; otherwise, the port is inactive. Click the Enable button to enable UPnP. Click the Disable button to disable UPnP. Click the Refresh button to update the Current UPnP Settings List Parental Control Choose menu Parental Control, and you can configure the parental control in the screen as shown in Figure The Parental Control function can be used to control the internet activities of the child, limit the child to access certain websites and restrict the time of surfing. 73

80 Figure 3-66 Enable Parental Control: Check the box if you want this function to take effect. This function is disabled by default. MAC Address of Parental PC: In this field, enter the MAC address of the controlling PC, or you can make use of the Copy To Above button below. MAC Address of Current PC: This field displays the MAC address of the PC that is managing this router. If the MAC Address of your adapter is registered, you can click the Copy To Above button to fill this address to the MAC Address of Parental PC field above. Add URL: Here you can input the net addresses which the child is allowed to access. Click the Save button to save your settings. 74

81 3.14 Access Restriction Rules There are four submenus under the IPv4 Access Restriction Rules menu: Rule, LAN Host, WAN Host, Schedule and DoS. Click any of them, and you will be able to configure the corresponding function Rule Choose menu Access Restriction Rules Rule, and then you can view and set Access Control rules in the screen as shown in Figure Figure 3-67 Enable Firewall: Select the check box to enable the IPv4 Firewall function, so the Default Filtering Rules can take effect. Description: Here displays the description of the IPv4 rule and this name is unique. LAN Host: Here displays the host selected in the corresponding rule. Target: Here displays the target selected in the corresponding rule. Schedule: Here displays the schedule selected in the corresponding rule. Status: Here displays the status of the rule, enabled or not. Edit: Here you can edit or delete an existing rule. Add New: Click the Add New button to add a new rule entry. Enable Selected: Click the Enable Selected button to enable the selected rules in the list. 75

82 Disable Selected: Click the Disable Selected button to disable the selected rules in the list. Delete Selected: Click the Delete Selected button to delete the selected entries in the table. The methods to add a new IPv4 rule: 1. Click the Add New button and the next screen will pop up as shown in Figure Give a name (e.g. Rule_1) for the rule in the Description field. 3. Select a host from the LAN Host drop-down list or choose Add LAN Host. 4. Select a target from the WAN Host drop-sown list or choose Add WAN Host. 5. Select a schedule from the Schedule drop-down list or choose Add Schedule. 6. In the Action field, select Deny or Allow to deny or allow your entry. 7. In the Status field, select Enabled or Disabled to enable or disable your entry. 8. In the Direction field, select IN or OUT from the drop-down list for the direction. 9. In the Protocol field, here are four options, All, TCP, UDP, and ICMP. Select one of them from the drop-down list for the target. 10. Click the Save button Host (LAN) Figure 3-68 Choose menu Access Restriction Rules Host (LAN), and then you can view and set a Host list in the screen as shown in Figure Figure 3-69 Description: Here displays the description of the host and this description is unique. Address Info: Here displays the information about the host. It can be IP or MAC. Edit: To modify an existing entry. 76

83 To add a new entry, please follow the steps below. 1. Click the Add New button and the next screen will pop up as shown in Figure Figure In the Mode field, select IP Address or MAC Address. If you select IP Address, please follow the steps below: 1) In Description field, create a unique description for the host (e.g. Host_1). 2) In IP Address field, enter the IP address. If you select MAC Address, please follow the steps below: 1) In Description field, create a unique description for the host (e.g. Host_1). 2) In MAC Address field, enter the MAC address. 3. Click the Save button to complete the settings. Click the Delete Selected button to delete the selected entries in the table Target (WAN) Choose menu Access Restriction Rules Target (WAN), and then you can view and set a Host list in the screen as shown in Figure Figure 3-71 Description: Here displays the description about the WAN and this description is unique. Details: The details can be IP address, port, or domain name. Edit: To modify an existing entry. To add a new entry, please follow the steps below. 1. Click the Add New button. 2. In Mode field, select IP Address, MAC Address or URL Address. If you select IP Address, the screen shown is Figure

84 Figure ) In Description field, create a unique description for the host (e.g. Host_1). 2) In IP Address field, enter the IP address. If you select MAC Address, the screen shown is Figure Figure ) In Description field, create a unique description for the host (e.g. Host_1). 2) In MAC Address field, enter the MAC address. If you select URL Address, the screen shown is Figure Figure ) In Description field, create a unique description for the host (e.g. Host_1). 2) Enter the URL address in the Add URL Address field, and then click the Add button. The URL address will be shown in the Detail table. If you click the Delete button, the existing URL address in the Detail table can be deleted. 3. Click the Save button to complete the settings. 78

85 Schedule Choose menu Access Restriction Rules Schedule, and then you can view and set a Schedule list in the next screen as shown in Figure Figure 3-75 Description: Here displays the description of the schedule and this description is unique. Edit: Here you can modify an existing schedule. To add a new schedule, follow the steps below: 1. Click Add New button and the next screen will pop-up as shown in Figure In Description field, create a unique description for the schedule (e.g. Schedule_1). 3. In Apply To field, select the day or days you need. 4. In time field, you can select all day-24 hours or you may enter the Start Time and End Time in the corresponding field. 5. Click Save to complete the settings. Click the Clear Schedule button to clear your settings in the table. Figure 3-76 Click the Delete Selected button to delete the slected entries in the table. 79

86 DoS Choose menu Access Restriction Rules DoS, and then you can view and set DoS in the next screen as shown in Figure Figure 3-77 DoS protection - Denial of Service protection. Check the Enable or Disable button to enable or disable the DoS protection function. Only when it is enabled, will the flood filters be enabled. Note: Dos Protection will take effect only when the Traffic Statistics in System Tools Statistics is enabled. Enable ICMP-Flood Attack Filtering - Enable or Disable the ICMP-Flood Attack Filtering. ICMP-Flood Packets Threshold (5~3600) - The default value is 50. Enter a value between 5 ~ When the current ICMP-Flood Packets number is beyond the set value, the router will startup the blocking function immediately. Enable UDP-Flood Filtering - Enable or Disable the UDP-Flood Filtering. UDP-Flood Packets Threshold (5~3600) - The default value is 500. Enter a value between 5 ~ When the current UPD-Flood Packets number is beyond the set value, the router will startup the blocking function immediately. Enable TCP-SYN-Flood Attack Filtering - Enable or Disable the TCP-SYN-Flood Attack Filtering. TCP-SYN-Flood Packets Threshold (5~3600) - The default value is 50. Enter a value between 5 ~ When the current TCP-SYN-Flood Packets numbers is beyond the set value, the router will startup the blocking function immediately. Forbid ping packet from LAN port - Enable or Disable Forbid ping packet from LAN port. The default setting is disabled. If enabled, the ping packet from LAN cannot access the router. This function can be used to defend against some viruses. 80

87 Click the Save button to save the settings. Click the Blocked DoS Host List button to display the DoS host table by blocking IPv6 Firewall There are four submenus under the IPv6 Firewall menu: IPv6 Rule, IPv6 Host, IPv6 Target and IPv6 Schedule. Click any of them, and you will be able to configure the corresponding function IPv6 Rule Choose menu IPv6 Firewall IPv6 Rule, and then you can view and set Access Control rules in the screen as shown in Figure Figure 3-78 Enable IPv6 Firewall: Select the check box to enable the IPv6 Firewall function, so the Default Filtering Rules can take effect. Description: Here displays the description of the IPv6 rule and this name is unique. IPv6 LAN Host: Here displays the IPv6 LAN host selected in the corresponding rule. Target: Here displays the target selected in the corresponding rule. Schedule: Here displays the schedule selected in the corresponding rule. Status: Here displays the status of the rule either enabled or disabled. Edit: Here you can edit or delete an existing rule. 81

88 To add a new IPv6 rule: 1. Click the Add New button, and you will see the screen as shown in Figure Figure Give a name (e.g. Rule_1) for the rule in the Description field. 3. Select a host from the IPv6 LAN Host drop-down list or choose Add IPv6 LAN Host. 4. Select a target from the IPv6 WAN Host drop-sown list or choose Add IPv6 WAN Host. 5. Select a schedule from the IPv6 Schedule drop-down list or choose Add IPv6 Schedule. 6. In the Action field, select Deny or Allow to deny or allow your entry. 7. In the Status field, select Enabled or Disabled to enable or disable your entry. 8. In the Direction field, select IN or OUT from the drop-down list for the direction. 9. In the Protocol field, here are four options, All, TCP, UDP, and ICMPv6. Select one of them from the drop-down list for the target. 10. Click the Save button to save the settings. Click the Enable/ Disable Selected button to make selected entries enabled or disabled. Click the Delete Selected button to delete selected entries IPv6 Host Choose menu IPv6 Firewall IPv6 Host, and then you can view and set a Host list in the screen as shown in Figure Figure 3-80 Description: Here displays the description of the host and this description is unique. 82

89 Address Info: Here displays the information about the host. Edit: To modify an existing entry. To add a new entry, please follow the steps below. 1. Click the Add New button, and you will see the screen as shown in Figure Figure Create a unique name for the host (e.g. Host_1) in the Description field. 3. Enter an IPv6 address in the IPv6 Address field. 4. Enter the prefix length of the IPv6 address in the Prefix Length field. 5. Click the Save button to save the settings. Click the Delete Selected button to delete selected entries IPv6 Target Choose menu IPv6 Firewall IPv6 Target, and then you can view and set a Host list in the screen as shown in Figure Figure 3-82 Description: Here displays the description about the WAN and this description is unique. Details: The details can be IPv6 address, prefix length or port. Edit: To modify an existing entry. To add a new entry, please follow the steps below. 1. Click the Add New button, and you will see the screen as shown in Figure Figure

90 2. Create a unique description for the host (e.g. Host_1) in the Description field. 3. Enter an IPv6 address in the IPv6 Address field. 4. Enter the prefix length of the IPv6 address in the Prefix Length field. 5. Click the Save button to save the settings. Click the Delete Selected button to delete selected entries IPv6 Schedule Choose menu IPv6 Firewall IPv6 Schedule, and then you can view and set a Schedule list in the next screen as shown in Figure Figure 3-84 Description: Here displays the description of the schedule and this description is unique. Edit: Here you can modify an existing schedule. To add a new schedule, follow the steps below: 1. Click Add New button and you will see the screen as shown in Figure Figure Create a unique description for the schedule (e.g. Schedule_1) in Description field. 3. Select the day or days you need in Apply To field. 84

91 4. In time field, you can select all day-24 hours or you may enter the Start Time and Stop Time in the corresponding field. 5. Click Save to save the settings. Click the Clear Schedule button to clear your settings in the table. Click the Delete Selected button to delete selected entries IPv6 Tunnel IPv6 tunnel is a kind of transition mechanism to enable IPv6-only hosts to reach IPv4 services and to allow isolated IPv6 hosts and networks to reach each-other over IPv4-only infrastructure before IPv6 completely supplants IPv4. It is a temporary solution for networks that do not support native dual-stack, where both IPv6 and IPv4 run independently. Choose menu IPv6 Tunnel, and you will see the screen as shown in Figure Figure 3-86 Enable: Check the box to enable IPv6 Tunnel function. It is disabled by default. Mechanism: Select a type for IPv6 tunnel from the drop-down list. DS-Lite, 6RD and 6to4 are supported. 1) DS-Lite This type is used in the situation that your WAN connection is IPv6 while LAN connection is IPv4. Select DS-Lite, and you will see the screen as shown in Figure Figure 3-87 WAN Connection: Select a WAN connection from the drop-down list. Only the connected WAN connections can be shown in the drop-down list. Configuration Type: Select a configuration type for this tunnel. Auto means to obtain the Remote IPv6 Address automatically while Manual means you set it manually. 85

92 Remote IPv6 Address: Enter the IPv6 address of the remote node. Note: In this type, there should not have any IPv4 WAN connections. If there are IPv4 WAN connections, the page will prompt you to delete all the IPv4 WAN connections. 2) 6RD This type is used in the situation that your WAN connection is IPv4 while LAN connection is IPv6. Select 6RD, and you will see the screen as shown in Figure Figure 3-88 WAN Connection: Select a WAN connection from the drop-down list. Only the connected WAN connections can be shown in the drop-down list. Configuration Type: Select a configuration type for this tunnel. Auto means to obtain the following parameters automatically while Manual means you set them manually. If Auto is selected, only Dynamic IP connection can be selected from the drop-down list. IPv4 Mask Length: The length of the selected WAN connection s IPv4 mask. 6RD Prefix: The prefix of the 6RD tunnel. 6RD Prefix Length: The length of the 6RD prefix. Border Relay IPv4 Address: The IPv4 address of the border relay router of 6RD tunnel. Note: In this type, there should not have any IPv6 WAN connections. If there are IPv6 WAN connections, the page will prompt you to delete all the IPv6 WAN connections. 3) 6to4 This type is used in the situation that your WAN connection is IPv4 while LAN connection is IPv6. Select 6to4, and you will see the screen as shown in Figure

93 Figure 3-89 WAN Connection: Select a WAN connection from the drop-down list. Only the connected WAN connections can be shown in the drop-down list. Note: In this type, there should not have any IPv6 WAN connections. If there are IPv6 WAN connections, the page will prompt you to delete all the IPv6 WAN connections Bandwidth Control Choose menu Bandwidth Control, and then you can configure the Upstream Bandwidth and Downstream Bandwidth in the next screen. The values you configure should be less than Kbps. For optimal control of the bandwidth, please select the right Line Type and ask your ISP for the total bandwidth of the egress and ingress. Figure 3-90 Enable Bandwidth Control: Check this box so that the Bandwidth Control settings can take effect. Total Upstream Bandwidth: The upload speed through the WAN port. Total Downstream Bandwidth: The download speed through the WAN port. Enable IPTV Bandwidth Guarantee: Check this box so that the Bandwidth Control settings for IPTV can take effect. If this checkbox is selected, you will have to set the following parameters as shown in the figure. Description: This is the information about the rules such as address range. Priority: Priority of Bandwidth Control rules. 1 stands for the highest priority while 8 stands for the lowest priority. The total Upstream/ Downstream Bandwidth is first allocated to guarantee all the Min Rate of Bandwidth Control rules. If there is any bandwidth left, it is first 87

94 allocated to the rule with the highest priority, then to the rule with the second highest priority, and so on. Upstream bandwidth: This field displays the max and mix upload bandwidth through the WAN port, the default is 0. Downstream bandwidth: This field displays the max and mix download bandwidth through the WAN port, the default is 0. Status: The status of this rule either Enabled or Disabled. Edit: Click Edit to modify the rule. To add/modify a Bandwidth Control rule, follow the steps below. 1. Click Add New shown in Figure 3-90, you will see a new screen shown in Figure Enter the information as the screen shown below. Figure Click the Save button. Click the Enable/ Disable Selected button to make selected entries enabled or disabled. Click the Delete Selected button to delete selected entries IP&MAC Binding There are two submenus under the IP &MAC Binding menu: Binding Settings and ARP List. Click any of them, and you will be able to scan or configure the corresponding function. The detailed explanations for each submenu are provided below Binding Settings This page displays the IP & MAC Binding Setting table; you can operate it in accord with your desire (shown in Figure 3-92). 88

95 Figure 3-92 MAC Address: The MAC address of the controlled computer in the LAN. IP Address: The assigned IP address of the controlled computer in the LAN. Bound: Check this option to enable ARP binding for a specific device. Edit: To modify or delete an existing entry. When you want to add or modify an IP & MAC Binding entry, you can click the Add New button or Edit button, and then you will go to the next page. This page is used for adding or modifying an IP & MAC Binding entry (shown in Figure 3-93). Figure 3-93 To add IP & MAC Binding entries, follow the steps below. 1. Click the Add New button as shown in Figure Enter the MAC Address and IP Address. 3. Select the Bind checkbox. 4. Click the Save button to save it. To modify or delete an existing entry, follow the steps below. 1. Find the desired entry in the table. 2. Click Edit as desired on the Edit column. Click the Enable/ Disable Selected button to make selected entries enabled or disabled. Click the Delete Selected button to delete selected entries ARP List To manage the computer, you could observe the computers in the LAN by checking the relationship of MAC address and IP address on the ARP list, and you could also configure the 89

96 items on the ARP list. This page displays the ARP List; it shows all the existing IP & MAC Binding entries (shown in Figure 3-94). Figure 3-94 MAC Address: The MAC address of the controlled computer in the LAN. IP Address: The assigned IP address of the controlled computer in the LAN. Status: Indicates whether or not the MAC and IP addresses are bound. Load: Load the item to the IP & MAC Binding list. Click the Load Selected button to load selected items to the IP & MAC Binding list. Click the Refresh button to refresh all items Dynamic DNS Choose menu Dynamic DNS, and you can configure the Dynamic DNS function. The router offers the DDNS (Dynamic Domain Name System) feature, which allows the hosting of a website, FTP server, or server with a fixed domain name (named by yourself) and a dynamic IP address, and then your friends can connect to your server by entering your domain name no matter what your IP address is. Before using this feature, you need to sign up for DDNS service providers such as The Dynamic DNS client service provider will give you a password or key. Figure 3-95 Service Provider: This field displays the service provider of DDNS. Domain Name: Enter the Domain name you received from dynamic DNS service provider. Username & Password: Type the User Name and Password for your DDNS account. 90

97 Enable DDNS: Activate the DDNS function or not. Login/ Logout: Login to or logout of the DDNS service Diagnostic Choose Diagnostic, you can view the test results for the connectivity of the physical layer and protocol layer for both LAN and WAN sides in the screen. Select the desired type and click the start button System Tools Figure 3-96 Choose menu System Tools, and you can see the submenus under the main menu: System Log, Time Settings, Remote Management, CWMP Settings, SNMP Settings, Backup & Restore, Factory Defaults, Firmware Upgrade, Restart and Statistics. Click any of them, and you will be able to configure the corresponding function. The detailed explanations for each submenu are provided below System Log Choose menu System Tools System Log, and then you can view the logs of the router. 91

98 Figure 3-97 Log Type: By selecting the log type, only logs of this type will be shown. Log Level: By selecting the log level, only logs of this level will be shown. Refresh: Refresh the page to show the latest log list. Clear Log: All the logs will be deleted from the router permanently, not just from the page. Save Log: Click to save all the logs in a txt file. Log Settings: Click to set the logs in the screen (shown in Figure 3-98). Figure 3-98 Save Locally: If Save Locally is selected, events will be recorded in the local memory. Minimum Level: Select the Minimum level in the drop-down list, for the Minimum Level, all logged events above or equal to the selected level will be displayed. Save Remotely: If Save Remotely is selected, events will be sent to the specified IP address and UDP port of the remote system log server. Click the Save button to save your settings Time Settings Choose menu System Tools Time Settings, and then you can configure the time on the following screen. 92

99 Figure 3-99 Time Zone: Select your local time zone from this pull down list. Date: Enter your local date in MM/DD/YY into the right blanks. Time: Enter your local time in HH/MM/SS into the right blanks. NTP Server 1 / NTP Server 2: Enter the address or domain of the NTP Server 1 or NTP Server 2, and then the router will get the time from the NTP Server preferentially. In addition, the router built-in some common NTP Servers, so it can get time automatically once it connects the Internet. To set time manually: 1. Select your local time zone. 2. Enter the Date in Year/Month/Day format. 3. Enter the Time in Hour/Minute/Second format. 4. Click Save. To set time automatically: 1. Select your local time zone. 2. Enter the address or domain of the NTP Server 1 or NTP Server Click the Get GMT button to get system time from Internet if you have connected to the Internet Remote Management Choose System Tools Remote Management, you can see the screen (shown in Figure 3-100) 93

100 Figure Current User Status: This box displays the information about User Type, User Name, Host IP Address and Host MAC Address. Account Management: Here you can set the account user information about Old Password, New User Name, New Password and Confirm Password. Service Configuration: Here you can modify the port of the router s web management interface and limit the hosts which can login this router s web management interface. ICMP (ping): If you select Remote, PC in public network can ping WAN address of the router. If you select Local, PC in private network can ping LAN address of the router CWMP Settings Choose System Tools CWMP Settings, you can configure the CWMP function in the screen. The router offers CWMP feature. The function supports TR-069 protocol which collects information, diagnoses the devices and configures the devices automatically via ACS (Auto-Configuration Server). 94

101 CWMP: Select enable the CWMP function. Figure Inform: Enable or disable the function. If enabled, the information will be informed to ACS server periodically. Inform Interval: Enter the interval time here. ACS URL: Enter the website of ACS which is provided by your ISP. ACS User Name/Password: Enter the User Name and password to login the ACS server. Interface used by TR-069 client: Select the interface used by TR-069 client. Display SOAP messages on serial console: Enable or disable this function. Connection Request User Name/Password: Enter the User Name and Password that provided the ACS server to login the router. Connection Request Path: Enter the path that connects to the ACS server. Connection Request Port: Enter the port that connects to the ACS server. Connection Request URL: Enter the URL that connects to the ACS server SNMP Settings Choose Management SNMP Agent, you can see the SNMP-Configuration screen as shown below. SNMP (Simple Network Management Protocol) has been widely applied in the computer networks currently, which is used for ensuring the transmission of the management information between any two nodes. In this way, network administrators can easily search and modify the information on any node on the network. Meanwhile, they can locate faults promptly and implement the fault diagnosis, capacity planning and report generating. 95

102 Figure An SNMP Agent is an application running on the router that performs the operational role of receiving and processing SNMP messages, sending responses to the SNMP manager, and sending traps when an event occurs. So a router contains SNMP "agent" software can be monitored and/or controlled by SNMP Manager using SNMP messages Backup & Restore Choose menu System Tools Backup & Restore, and then you can save the current configuration of the router as a backup file and restore the configuration via a backup file as shown in Figure Figure Click the Backup button to save all configuration settings as a backup file in your local computer. To upgrade the router 's configuration, follow these instructions. Click the Browse button to find the configuration file which you want to restore. Click the Restore button to update the configuration with the file whose path is the one you have input or selected in the blank. Note: The current configuration will be covered with the uploading configuration file. Wrong process will lead the device unmanaged. The restoring process lasts for 20 seconds and the router will restart automatically then. Keep the power of the router on during the process, in case of any damage Factory Defaults Choose menu System Tools Factory Defaults, and then and you can restore the configurations of the router to factory defaults on the following screen 96

103 Figure Click the Restore button to reset all configuration settings to their default values. The default User Name: admin The default Password: admin The default Subnet Mask: Note: All changed settings will be lost when defaults are restored Firmware Upgrade Choose menu System Tools Firmware Upgrade, and then you can update the latest version of firmware for the router on the following screen. Figure Firmware Version: Displays the current firmware version. Hardware Version: Displays the current hardware version. The hardware version of the upgrade file must accord with the router s current hardware version. To upgrade the router's firmware, follow these instructions below: 1) Download a most recent firmware upgrade file from our website. 2) Enter or select the path name where you save the downloaded file on the computer into the File Name blank. 3) Click the Upgrade button. 4) The router will reboot while the upgrading has been finished. 97

104 Note: 1) New firmware versions are posted at and can be downloaded for free. There is no need to upgrade the firmware unless the new firmware has a new feature you want to use. However, when experiencing problems caused by the router rather than the configuration, you can try to upgrade the firmware. 2) When you upgrade the router's firmware, you may lose its current configurations, so before upgrading the firmware please write down some of your customized settings to avoid losing important settings. 3) Do not turn off the router or press the Reset button while the firmware is being upgraded. Loss of power during the upgrade could damage the router. 4) The firmware version must correspond to the hardware. 5) The upgrade process takes a few moments and the router restarts automatically when the upgrade is complete Restart Choose menu System Tools Restart, and then you can click the Restart button to restart the router via the next screen. Figure Some settings of the router will take effect only after rebooting, which include Change the LAN IP Address (system will reboot automatically). Change the DHCP Settings. Change the Wireless configurations. Change the Web Management Port. Upgrade the firmware of the router (system will reboot automatically). Restore the router's settings to factory defaults (system will reboot automatically). Update the configuration with the file (system will reboot automatically Statistics Choose menu System Tools Statistics, and then you can view the statistics of the router, including total traffic and current traffic of the last Packets Statistic Interval. 98

105 Figure Statistics Status: Enable or Disable. The default value is disabled. To enable it, click the Enable. If it is disabled, the function of DoS protection in Security settings will be disabled. Statistics Interval (5-60): The default value is 10. Select a value between 5 and 60 seconds in the drop-down list. The Packets Statistic interval indicates the time section of the packets statistic. Click Reset All to reset the values of all the entries to zero. Click Delete All to delete all entries in the table. Click the Refresh button to refresh immediately. Statistics Table: IP/MAC Address The IP and MAC address are displayed with related statistics. Total Current Operation Packets Bytes Packets Bytes ICMP Tx UDP Tx SYN Tx Reset Delete The total number of packets received and transmitted by the router. The total number of bytes received and transmitted by the router. The total number of packets received and transmitted in the last Packets Statistic interval seconds. The total number of bytes received and transmitted in the last Packets Statistic interval seconds. The number of the ICMP packets transmitted to WAN per second at the specified Packets Statistics interval. It is shown like current transmitting rate / Max transmitting rate. The number of UDP packets transmitted to the WAN per second at the specified Packets Statistics interval. It is shown like current transmitting rate / Max transmitting rate. The number of TCP SYN packets transmitted to the WAN per second at the specified Packets Statistics interval. It is shown like current transmitting rate / Max transmitting rate. Reset the value of he entry to zero. Delete the existing entry in the table. 99

106 3.22 Logout Choose Logout, and you will back to the login screen as shown in Figure Figure